H12-711_V4.0無料問題集「Huawei HCIA-Security V4.0」

質問 1

When the FW is deployed at the network egress, if a failure occurs, Internet access services will be affected. In order to improve the reliability of the network, two FWs need to be deployed and formed ()

正解：

Dual-machine hot standby

質問 2

Which of the following is not a stand-alone anti-virus technology?

（A）Patch the system

（B）Use virus detection tools

（C）Configure anti-virus technology on the network firewall

正解：C 解答を投票する

質問 3

Which of the following statements about the default configuration in IPsec are correct? (Multiple Choice)

（A）SA triggering method is traffic triggering

（B）The interval for sending NAT Keepalive messages is 20 seconds.

（C）The global IPsec anti-replay function is not enabled by default.

（D）Enable NAT traversal function by default

正解：A、D 解答を投票する

質問 4

Which of the following attacks can intrusion prevention detect? (Multiple Choice)

（A）Buffer overflow attack

（B）Trojan horse

（C）Injection attack

（D）Directory traversal

正解：A、B、C、D 解答を投票する

質問 5

Configure authentication options. If you use web push page authentication, you also need to configure the corresponding security policy to allow the data flow with the default port number () to reach the firewall itself.

正解：

質問 6

If there is an incident of foreign criminals using the Internet to steal our country's national secrets, what kind of early warning will the country activate?

（A）Yellow Alert

（B）Red Alert

（C）Orange Alert

（D）Blue Alert

正解：C 解答を投票する

質問 7

Which of the following does not include the steps of the security assessment method?

（A）Questionnaire survey

（B）Data analysis

（C）Penetration testing

（D）Manual audit

正解：B 解答を投票する

質問 8

Which of the following descriptions about the difference between AH and ESP is incorrect?

（A）The integrity verification scope of the AH protocol does not include the content of the IP header.

（B）ESP encrypts the payload in the data and then encapsulates it into the data packet to ensure the confidentiality of the data.

（C）AH only supports authentication function and does not support encryption function.

（D）ESP supports authentication and encryption functions

正解：A 解答を投票する

質問 9

Regarding the description of IP spoofing, which of the following is incorrect?

（A）The attacker needs to disguise the source IP address as a trusted host and send a data segment with SYN annotation to request a connection.

（B）IP spoofing attacks are launched by taking advantage of the normal trust relationship between hosts based on IP addresses.

（C）After a successful IP spoofing attack, the attacker can use any forged IP address to imitate a legitimate host to access key information.

（D）Hosts with trust relationships based on IP addresses can log in directly without entering password verification.

正解：A 解答を投票する

質問 10

Which of the following are the response actions of firewall and anti-virus? (Multiple Choice)

（A）Attachment deletion

（B）block

（C）Alarm

（D）Declare

正解：A、B、C、D 解答を投票する

質問 11

Among the symmetric encryption algorithms, the () algorithm is used in data communication channels, browsers or network links.

正解：

stream encryption

質問 12

By default, configuration modifications made by the administrator on the firewall are automatically stored in non-volatile registers

（A）False

（B）True

正解：B 解答を投票する

H12-711_V4.0 無料問題集「Huawei HCIA-Security V4.0」

弊社を連絡する

関連リンク

トップ試験